Web Developer Security Engineer

About DMI

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com About the Opportunity:

DMI is seeking a Web Developer Security Engineer to embed security throughout the software development lifecycle for a federal agency client. In this role, you will identify and remediate vulnerabilities in web applications and APIs, integrate security controls into application architectures, and support compliance with federal cybersecurity frameworks — functioning at the intersection of development and security.

Duties and Responsibilities

* Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs * Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and technical validation of remediation * Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms * Review and analyze web server and application logs to detect anomalies and indicators of compromise; implement threat intelligence automation * Deploy, tune, and maintain Web Application Firewalls (WAF) tailored to custom-developed applications and traffic patterns * Configure and manage File Integrity Monitoring (FIM) solutions to detect and alert on unauthorized changes to web content directories * Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting against established baselines * Ensure web applicatio...